Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-18438

Fixed in a distro release EPSS <1%

Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.

Published 2018-10-19 · CVE record · OSV

Products: qemu, redhat enterprise_linux, redhat openstack

Distro releases

ReleasePackageFixed in
Chainguardqemu0
Chainguardqemu-block-iscsi0
Chainguardqemu-block-rbd0
Chainguardqemu-edk2-aarch640
Chainguardqemu-edk2-x86_640
Chainguardqemu-ipxe0
Chainguardqemu-modules0
Chainguardqemu-modules-spice0
Chainguardqemu-modules-usb-host0
Chainguardqemu-system-aarch640
Chainguardqemu-system-x86_640
Chainguardqemu-user0
Chainguardqemu-user-binfmt0
Chainguardqemu-utils0
Debian 12qemu1:3.1+dfsg-1
Debian 13qemu1:3.1+dfsg-1
Debian 14qemu1:3.1+dfsg-1
SUSE Linux Enterprise Point of Sale 11 SP3kvm1.4.2-53.26.2
SUSE Linux Enterprise Point of Sale 11 SP3xen4.2.5_21-45.30.1
SUSE Linux Enterprise Server 11 SP3-LTSSkvm1.4.2-53.26.2
SUSE Linux Enterprise Server 11 SP3-TERADATAkvm1.4.2-53.26.2
SUSE Linux Enterprise Server 11 SP4kvm1.4.2-60.18.2
SUSE Linux Enterprise Server 11 SP4xen4.4.4_38-61.40.1
SUSE Linux Enterprise Server 12 SP1-LTSSxen4.5.5_28-22.58.1
SUSE Linux Enterprise Server 12-LTSSxen4.4.4_40-22.77.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4kvm1.4.2-60.18.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4xen4.4.4_38-61.40.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1xen4.5.5_28-22.58.1
SUSE Linux Enterprise Software Development Kit 11 SP4xen4.4.4_38-61.40.1
Wolfiqemu0
Wolfiqemu-block-iscsi0
Wolfiqemu-block-rbd0
Wolfiqemu-edk2-aarch640
Wolfiqemu-edk2-x86_640
Wolfiqemu-ipxe0
Wolfiqemu-modules0
Wolfiqemu-modules-spice0
Wolfiqemu-modules-usb-host0
Wolfiqemu-system-aarch640
Wolfiqemu-system-x86_640
Wolfiqemu-user0
Wolfiqemu-user-binfmt0
Wolfiqemu-utils0